CVE-2018-10295

CVE-2018-10295 affects ChemCMS v1.0.6. The vulnerability is a Cross-Site Request Forgery (CSRF) that can be exploited via the public/admin/user/addpost.html page to add an administrator account. This could enable an attacker to gain admin privileges on the affected system. The documents do not pr...

CVE-2018-10265

An issue was discovered in HongCMS v3.0.0. There is a CSRF vulnerability that can add an administrator account via the admin/index.php/users/save URI...

CVE-2018-10266

BEESCMS 4.0 is affected by a CSRF flaw that allows an attacker to add an administrator account via the admin/admin_admin.php?nav=list_admin_user&admin_p_nav=user URI. The root cause is cross-site request forgery, enabling privilege elevation by creating a new admin account without authentication....

CVE-2018-10265

This CVE (CVE-2018-10265) affects HongCMS v3.0.0 and is a CSRF flaw on the admin/users/save endpoint that can add an administrator account. Root cause: CSRF protections not adequately enforced on the admin path. Impact (per provided metrics): CVSSv3 base score 8.8 (HIGH), with network attack vect...

CVE-2018-10266

BEESCMS 4.0 has a CSRF vulnerability to add an administrator account via the admin/adminadmin.php?nav=listadminuser&adminpnav=user URI...

CVE-2018-10267

WTCMS 1.0 has a CSRF vulnerability to add an administrator account via the index.php?admin&m=user&a=addpost URI...

PT-2018-9797 · Wtcms · Wtcms

Name of the Vulnerable Software and Affected Versions: WTCMS version 1.0 Description: The issue allows for the addition of an administrator account due to a CSRF vulnerability. This can be exploited via the "index.php?admin&m=user&a=add post" URI. Recommendations: For WTCMS version 1.0, as a...

CVE-2018-10249

baijiacms V3 has CSRF via index.php?mod=site&op=edituser&name=manager&do=user to add an administrator account...

CVE-2018-10223

An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add an admin account via /index.php/admin/adminmanage/add.html...

Cross site request forgery (csrf)

An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add an admin account via /index.php/admin/adminmanage/add.html...

CVE-2018-10223

An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add an admin account via /index.php/admin/adminmanage/add.html...

CVE-2018-10223

An issue was discovered in YzmCMS 3.8. There is a CSRF vulnerability that can add an admin account via /index.php/admin/adminmanage/add.html...

CVE-2018-10223

CVE-2018-10223 affects YzmCMS 3.8. It is a Cross-Site Request Forgery (CSRF) vulnerability in /index.php/admin/admin_manage/add.html that can add an administrator account. Implication: attacker could obtain admin privileges on the affected system. Root cause: CSRF flaw enabling unauthorized admin...

Zoho ManageEngine Desktop Central Web Services Vulnerability

ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. A security...

idreamsoft iCMS Cross-Site Request Forgery Vulnerability (CNVD-2018-08768)

idreamsoft iCMS is an open source content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in idreamsoft iCMS version 7.0.7. A remote attacker can exploit this vulnerability to add an administrative account with the help of...

Cross site request forgery (csrf)

An issue was discovered in TuziCMS v2.0.6. There is a CSRF vulnerability that can add an admin account, as demonstrated by a history.pushState call...

CVE-2018-10185

An issue was discovered in TuziCMS v2.0.6. There is a CSRF vulnerability that can add an admin account, as demonstrated by a history.pushState call...

CVE-2018-10185

An issue was discovered in TuziCMS v2.0.6. There is a CSRF vulnerability that can add an admin account, as demonstrated by a history.pushState call...

CVE-2018-10185

CVE-2018-10185 affects TuziCMS v2.0.6. The issue is a Cross-Site Request Forgery (CSRF) vulnerability that can add an administrator account, demonstrated via a history.pushState call. Impact/summary: attacker-triggered CSRF can escalate to admin rights on affected deployments. The Red Hat and CNV...

CVE-2018-10185

An issue was discovered in TuziCMS v2.0.6. There is a CSRF vulnerability that can add an admin account, as demonstrated by a history.pushState call...